This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch release/8.1 in repository ffmpeg.
commit 229845170a23fc0b64a4cda3f78b9752d0f28da8 Author: Kenan Alghythee <[email protected]> AuthorDate: Sat Jul 11 16:57:38 2026 +0200 Commit: Michael Niedermayer <[email protected]> CommitDate: Sat Sep 19 14:27:01 2026 +0200 avcodec/bsf/dovi_rpu: handle update_rpu() returning no RPU Fixes: out of array access Fixes: SUcVEyk7r3Gc Found-by: Kenan Alghythee <[email protected]> (cherry picked from commit 534f16d866c732a85c34ac576d66d578669578f1) Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/bsf/dovi_rpu.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/libavcodec/bsf/dovi_rpu.c b/libavcodec/bsf/dovi_rpu.c index 9fb47f3ab3..90a288671e 100644 --- a/libavcodec/bsf/dovi_rpu.c +++ b/libavcodec/bsf/dovi_rpu.c @@ -99,6 +99,8 @@ static int dovi_rpu_update_fragment_hevc(AVBSFContext *bsf, AVPacket *pkt, ret = update_rpu(bsf, pkt, 0, nal->data + 2, nal->data_size - 2, &rpu, &rpu_size); if (ret < 0) return ret; + if (!rpu || rpu_size <= 0) + return 0; /* NAL unit header + NAL prefix */ if (rpu_size + 3 <= nal->data_size && av_buffer_is_writable(nal->data_ref)) { @@ -158,6 +160,10 @@ static int dovi_rpu_update_fragment_av1(AVBSFContext *bsf, AVPacket *pkt, &rpu, &rpu_size); if (ret < 0) return ret; + if (!rpu || rpu_size <= 1) { + av_free(rpu); + continue; + } ref = av_buffer_create(rpu, rpu_size, av_buffer_default_free, NULL, 0); if (!ref) { -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
